Patchfirst
Patchfirst
T1542.001PersistenceStealth

System Firmware

Adversaries may modify system firmware to persist on systems.The BIOS (Basic Input/Output System) and The Unified Extensible Firmware Interface (UEFI) or Extensible Firmware Interface (EFI) are examples of system firmware that operate as the software interface between the operating system and hardware of a computer. System firmware like BIOS and (U)EFI underly the functionality of a computer and…

attack.mitre.org ↗
CVEs6
In 1
Reports1

Detections

2 Sigma rules tagged T1542.001
System FirmwareT1542.0012 general rules

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to System Firmware

6 CVEs, by priority. Each link shows its badge.
  1. CVE-2025-47827IGEL OS Use of a Key Past its Expiration Date Vulnerability
    IGEL · IGEL OSKEVPublic exploitMedium · 4.6T1542Pre-OS BootT1542.001System Firmware
    AI mapping from the description · primary impact
    4.9%Top 7.9%
    64.6priority
  2. CVE-2020-5379Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability
    Dell · CPG BIOSMedium · 6.8T1542.001System Firmware
    MITRE CTID mapping of the CVE · primary impact
    0.4%Top 66%
    11.5priority
  3. CVE-2020-5376Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability
    Dell · CPG BIOSMedium · 6.8T1542.001System Firmware
    MITRE CTID mapping of the CVE · primary impact
    0.4%Top 67%
    11.4priority
  4. CVE-2020-5378Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability
    Dell · CPG BIOSMedium · 6.8T1542.001System Firmware
    MITRE CTID mapping of the CVE · primary impact
    0.4%Top 67%
    11.4priority
  5. CVE-2020-5326Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot…
    Dell · Dell Client Consumer and Commercial PlatformsMedium · 6.1T1542.001System FirmwareT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the CVE · follow-on activity
    0.3%Top 71%
    10.0priority
  6. CVE-2019-1736Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability
    Cisco · Cisco Identity Services Engine SoftwareMedium · 6.2T1542.001System Firmware
    MITRE CTID mapping of the CVE · primary impact
    0.2%Top 84%
    7.5priority

Passages that support these links

↑ ↓ chooseEnter openEsc close